Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The EU Data Boundary is a geographically defined boundary within which Microsoft stores and processes Customer Data and personal data for enterprise online services, including Microsoft 365. This article summarizes how the EU Data Boundary applies to Microsoft 365 and links to detailed documentation.
For the full EU Data Boundary documentation, see What is the EU Data Boundary?.
Overview
The EU Data Boundary commitment covers Customer Data, pseudonymized personal data in system-generated logs, and Professional Services Data at Rest for services identified in the Microsoft Product Terms.
These commitments are subject to limited circumstances where data might be transferred outside the EU Data Boundary. For details on those transfers, see EU Data Boundary transfers for all services.
Important
The EU Data Boundary documentation reflects the current state as of its date of publication. Microsoft continues to deploy more services and service capabilities within the EU Data Boundary and updates the documentation accordingly.
Countries or regions and datacenter locations
The EU Data Boundary consists of countries or regions in the European Union (EU) and the European Free Trade Association (EFTA):
- Countries or regions in the EU: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, and Sweden.
- Countries or regions in EFTA: Iceland, Liechtenstein, Norway, and Switzerland.
Microsoft uses or might use datacenters announced or currently operating in Austria, Belgium, Denmark, Finland, France, Germany, Greece, Ireland, Italy, Netherlands, Norway, Poland, Spain, Sweden, and Switzerland.
Configure Microsoft 365 for the EU Data Boundary
Microsoft 365 customers with a sign-up location in a country or region in the EU or EFTA are in scope for the EU Data Boundary. However, customers who purchased Multi-Geo Capabilities aren't in scope for the EU Data Boundary, even if their Tenant is listed as being in a country or region in the EU or EFTA.
You can check your Tenant's country or region in the Microsoft 365 admin center.
Data types in scope
The EU Data Boundary covers the following data categories:
- Customer Data — All data, including text, sound, video, image files, and software, provided to Microsoft by or on behalf of a customer through use of the online service. Customer Data doesn't include Professional Services Data or information used to configure resources.
- Personal data in system-generated logs — Logs created as part of regular service operation that might contain fields identifying specific persons. All personal data in system-generated logs is pseudonymized using encryption, masking, tokenization, or data blurring.
- Professional Services Data — All data provided to Microsoft by or on behalf of a customer through an engagement with Microsoft to obtain Professional Services.
Relationship to other data residency offerings
The EU Data Boundary is one of several Data Residency options available for Microsoft 365. For a comparison of all offerings, see Compare data residency offerings.
Other Data Residency solutions include:
- Product Terms Data Residency — Commitments included at no additional cost for eligible tenants.
- Advanced Data Residency — A paid add-on providing expanded Data Residency commitments for additional workloads.
- Multi-Geo Capabilities — Allows organizations to span their storage across multiple geographies.